Privacy Policy

Privacy Policy

Last updated: 13 September 2026 MHI Media, Ltd. ("MHI", "we", "us" or "our") is a performance creative agency. This notice explains what personal data we collect when you visit mhimedia.com or work with us, why we collect it, and what rights you have over it. We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have any questions, email contact@mhimedia.com. 1. WHO WE ARE MHI Media, Ltd. is the data controller for the personal data described in this notice. Our contact email is contact@mhimedia.com. 2. WHAT DATA WE COLLECT Information you give us. When you fill in a contact or booking form, email us, or book a call, we collect the details you provide: typically your name, work email, phone number, company name, website, monthly ad spend range, and anything you write in a message field. Information we collect automatically. When you visit our site we collect technical data such as your IP address, browser type, device type, pages viewed, referring URL, and time spent on pages. This is collected through cookies and similar technologies (see section 6). Information from clients. When you become a client we collect the information needed to deliver our services: contact details for your team, billing details, access credentials you choose to share (for example ad accounts or brand asset libraries), and performance data from the advertising platforms you run. Information from third parties. We may receive limited data from analytics providers, scheduling tools, and publicly available business sources such as LinkedIn or company websites. We do not knowingly collect special category data (such as health, religion, or political opinions) and we ask that you do not send it to us. 3. WHY WE USE YOUR DATA AND OUR LEGAL BASIS To respond to enquiries and book calls. Legal basis: our legitimate interest in responding to people who contact us, and taking steps at your request before entering a contract. To deliver our services to clients. Legal basis: performance of a contract. To run, secure, and improve our website. Legal basis: legitimate interest. To send marketing emails about our services. Legal basis: consent, or legitimate interest where you are an existing client or business contact. You can opt out at any time using the link in any email or by contacting us. To comply with legal and accounting obligations. Legal basis: legal obligation. 4. WHO WE SHARE DATA WITH We share personal data only where needed to run our business: Service providers who host our website, send our email, run our CRM, schedule calls, process payments, and provide analytics. These providers act on our instructions under contract. Advertising platforms (for example Meta, Google, TikTok) where you are a client and we manage or produce creative for your accounts. Professional advisers such as accountants, lawyers, and insurers. Authorities where the law requires it. We do not sell personal data. 5. INTERNATIONAL TRANSFERS Some of our providers are based outside the UK, including in the United States. Where data leaves the UK we rely on the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision, so that your data receives equivalent protection. 6. COOKIES We use essential cookies to make the site work and analytics cookies to understand how it is used. Where required, we ask for your consent before setting non-essential cookies. You can change your preferences through the cookie banner or your browser settings. Blocking some cookies may affect how the site works. 7. HOW LONG WE KEEP DATA Enquiry data: up to 24 months from last contact. Client data: for the duration of the engagement and up to 6 years afterwards for tax, accounting, and legal purposes. Marketing data: until you unsubscribe or 24 months of inactivity, whichever is sooner. Website analytics: up to 26 months. When data is no longer needed we delete or anonymise it. 8. SECURITY We use access controls, encryption in transit, and reputable providers to protect your data. No system is fully secure, so we cannot guarantee absolute security, but we will notify you and the ICO where the law requires it if a breach affects you. 9. YOUR RIGHTS Under UK GDPR you have the right to access your data, correct it, erase it, restrict or object to how we use it, receive it in a portable format, and withdraw consent where consent is our legal basis. To exercise any of these rights, email contact@mhimedia.com. We will respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to resolve any concern first. 10. CHILDREN Our services are for businesses. We do not knowingly collect data from anyone under 18. 11. THIRD-PARTY LINKS Our site may link to other websites. We are not responsible for their privacy practices. 12. CHANGES TO THIS NOTICE We may update this notice from time to time. The date at the top shows when it was last changed. Material changes will be flagged on the site. 13. CONTACT MHI Media, Ltd. contact@mhimedia.com